CVE-2014-9025

CVE-2014-9025 is a vulnerability in the Drupal Commerce module (7.x-1.x before 7.x-1.10) where the default checkout completion rule uses the customer's email as the username for new accounts. This allows remote attackers to obtain sensitive information. The vulnerability has a CVSS score of 5.0, indicating a medium severity, and can be exploited remotely with low attack complexity, potentially leading to information disclosure. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.