Is the fact that both are foreign keys enough to guarantee uniqueness for the combination of both?
Nope.
it should I also make them a composite unique key?
Correct. If you create a composite unique key that includes them - you guarantee the pairs to be unique (unless they accept NULL
values)