The vulnerability arises from the server's inability to handle excessive characters appended to multipart boundaries. This flaw can be exploited by sending malformed multipart requests, causing the server to enter an infinite loop and consume excessive resources. The attack does not require authentication, making it easy for attackers to exploit and cause a complete denial of service (DoS) for all users.

An attacker sends a specially crafted multipart request to the server with an excessive number of characters appended to the boundary. The server processes each extra character in an infinite loop, leading to resource exhaustion and making the service unresponsive to legitimate users.

All users of version 1.10.0 of the software are affected by this vulnerability. This includes both administrators and end-users who rely on the service for legitimate purposes.