CGI versions before 5.00 for Perl have a vulnerability that allows memory, CPU, and disk exhaustion due to missing or unenforced limits on request size, parameters, and uploads. The default setting for $CGI::POST_MAX imposes no limit, and even when set, it is not enforced for certain multipart request bodies. This can lead to resource exhaustion as request bodies are read fully into memory without restrictions.