CGI versions before 5.00 for Perl contain a vulnerability where a specially crafted POST request with a multipart/related Content-Type can cause CPU exhaustion. This occurs due to a backtracking regular expression used to extract boundary and start parameters, which can lead to cubic time complexity on certain headers without requiring a request body.