diff --git a/src/main/java/kr/dgucaps/caps/domain/ledger/dto/response/LedgerListResponse.java b/src/main/java/kr/dgucaps/caps/domain/ledger/dto/response/LedgerListResponse.java
index a3d5df2..661e9d0 100644
--- a/src/main/java/kr/dgucaps/caps/domain/ledger/dto/response/LedgerListResponse.java
+++ b/src/main/java/kr/dgucaps/caps/domain/ledger/dto/response/LedgerListResponse.java
@@ -11,7 +11,9 @@ public record LedgerListResponse(
         Long id,
         String title,
         MemberSummary member,
-        LocalDateTime createdAt
+        LocalDateTime createdAt,
+        Boolean isPinned,
+        Boolean hasFile
 ) {
     public static LedgerListResponse from(Ledger ledger) {
         return LedgerListResponse.builder()
@@ -19,6 +21,8 @@ public static LedgerListResponse from(Ledger ledger) {
                 .title(ledger.getTitle())
                 .member(MemberSummary.from(ledger.getMember()))
                 .createdAt(ledger.getCreatedAt())
+                .isPinned(ledger.isPinned())
+                .hasFile(ledger.getFileUrl() != null && !ledger.getFileUrl().isBlank())
                 .build();
     }
 }
diff --git a/src/main/java/kr/dgucaps/caps/global/config/CorsConfig.java b/src/main/java/kr/dgucaps/caps/global/config/CorsConfig.java
index aab3d52..2370ed7 100644
--- a/src/main/java/kr/dgucaps/caps/global/config/CorsConfig.java
+++ b/src/main/java/kr/dgucaps/caps/global/config/CorsConfig.java
@@ -30,11 +30,14 @@ public CorsFilter corsFilter() {
         // CORS 허용 URL
         List<String> allowedOrigins = Arrays.asList(
                 frontendLocal,
-                backendTest
+                backendTest,
+                "https://api.dgucaps.kr",
+                "http://localhost:3000",
+                "http://localhost:8080"
         );
         config.setAllowedOrigins(allowedOrigins);
         config.addAllowedHeader("*");
-        config.setAllowedMethods(Arrays.asList("HEAD", "GET", "POST", "PUT", "DELETE", "PATCH"));
+        config.setAllowedMethods(Arrays.asList("OPTIONS", "HEAD", "GET", "POST", "PUT", "DELETE", "PATCH"));
         source.registerCorsConfiguration("/**", config);
         return new CorsFilter(source);
     }