CVE-2013-2900

CVE-2013-2900 describes a directory traversal vulnerability in Google Chrome versions prior to 29.0.1547.57 on Windows. This flaw, residing in the FilePath::ReferencesParent function, allowed remote attackers to bypass path validation by using directory names composed solely of dots and whitespace characters. With a CVSS score of 7.5, this vulnerability is considered highly severe, enabling potential compromise of confidentiality, integrity, and availability with low attack complexity and no authentication required. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.